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Question: 1 


An administrator working in a vSphere with Tanzu environment wants to ensure that all persistent 
volumes configured by developers within a namespace are placed on a defined subset of datastores The 
administrator has applied tags to the required datastores in the vSphere Client 

Which action should the administrator take next to meet the requirement? 


A. Create a storage policy containing the tagged datastores. and apply it to the vSphere Namespace. 
B. Create a storage class containing the tagged datastores. and apply it to the Supervisor Cluster 

C. Create a persistent volume claim containing the tagged datastores, and apply it to the vSphere 
Namespace. 


D. Create a storage Policy containing the tagged datastores. and apply it to the Supervisor Cluster. 


Answer: A 


Explanation: 


Namespace Namespace 


StorageClass StorageClass 


Supervisor Cluster 


The vSphere administrator defines and assigns VM storage policies to a namespace: 
e VM storage policies are translated into Kubernetes storage classes. 
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e Developers can access all assigned VM storage policies in the form of storage classes. 
e Developers cannot manage storage classes. 


Storage class names are created in the following way: 

e Spaces in VM Storage Policy names are replaced with hyphens (-). 

e Special characters are replaced with a digit. A VM Storage Policy called My Gold Policy $ is called my- 
gold-policy-0 as a storage class. 


Question: 2 


Which three roles does the Spherelet perform? (Choose three ) 


A. Determines placement of vSphere pods 

B. Manages node configuration 

C. Starts vSphere pods 

D. Provides a key-value store for pod configuration 
E. Communicates with Kubernetes API 

F. Provisions Tanzu Kubernetes clusters 


Answer: BCE 


Explanation: 


Supervisor Cluster Architecture 


: Supervisor Cluster 


ESXi Host 


| Spherelet nosa | 


K8S Control Plane VM 


ESXi Host 


ESXi Host 


vSphere Pod 


ORX 


Spherelet is a kubelet that is ported natively to ESXi. It allows the ESXi host to become part of a 
Kubernetes cluster. Spherelet performs the following functions: 

e Communicates with the control plane VMs 

e Manages node configuration 
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e Starts vSphere Pods 
e Monitors vSphere Pods 


Question: 3 


Why would developers choose to deploy an application as a vSphere Pod instead of a Tanzu Kubernetes 
cluster? 


A. They need the application to run as privileged pods. 

B. The application works with sensitive customer data, and they want strong resource and security 
isolation. 

C. They want to have root level access to the control plane and worker nodes in the Kubernetes cluster. 
D. The application requires a version of Kubernetes that is above the version running on the supervisor 
cluster. 


Answer: B 


Explanation: 


vSphere Admin 


Supervisor Cluster 


ESXi Host ESXi Host ESXi Host 


Spherelet hostd Spherelet hostd Spherelet hostd 


A vSphere Pod is a VM with a small footprint that runs one or more Linux containers. With vSphere Pods, 
workloads have the following capabilities: 

e Strong isolation from a Linux kernel based on Photon OS 

e Resource management using DRS 

e Same level of resource isolation as VMs 

e Open Container Initiative (OCI) compatible 

e Equivalent to a Kubernetes Container Host 
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vSphere Pods are not compatible with vSphere vMotion. When an ESXi host is placed into maintenance 
mode, running vSphere Pods are drained and redeployed on another ESXi host, but only if the vSphere 
Pod is part of a ReplicaSet. 


Question: 4 


A company needs to provide global visibility and consistent policy management across multiple Tanzu 
Kubernetes Clusters, namespaces, and clouds Which VMvare solution will meet these requirements’? 


A. vSphere with Tanzu Supervisor Cluster 
B. vCenter Server 

C. Tanzu Mission Control 

D. Tanzu Kubernetes Grid Service 


Answer: C 


Explanation: 


WR Tangu Miwon Control 


Clusters 


VMware Tanzu Mission Control™ is a centralized management platform for consistently operating and 
securing your Kubernetes infrastructure and modern applications across multiple teams and clouds. 
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A developer is connecting to a Tanzu Kubernetes Cluster using the kubectl vsphere login command 
Which information must be specified, in addition to both the name of the cluster and the Supervisor 
Cluster Control Wane IP? 


A. The path to the existing kubeconfig file and the SSO Username 

B. The path to the existing kubeconfig file and the Token D for the SSO credentials 
C. The name of the Supervisor Namespace and the Token ID for the SSO credentials 
D. The name of the Supervisor Namespace and the SSO Username 


Answer: D 


Explanation: 


To connect to the Supervisor Cluster, run the following command. 

kubectl vsphere login --server=SUPERVISOR-CLUSTER-CONTROL-PLANE-IP 
--tanzu-kubernetes-cluster-name TANZU-KUBERNETES-CLUSTER-NAME 
--tanzu-kubernetes-cluster-namespace SUPERVISOR-NAMESPACE-WHERE-THE-CLUSTER-IS-DEPLOYED 
--vsphere-username VCENTER-SSO-USER-NAME 

For example: 

kubectl vsphere login --server=10.92.42.137 

--tanzu-kubernetes-cluster-name tanzu-kubernetes-cluster-01 

--tanzu-kubernetes-cluster-namespace tanzu-ns-1 

--vsphere-username administrator@example.com 
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